Isai 4f1b7fa448 Update execution_user_exec_to_pod.toml (#2092) ...

I'm removing the event.dataset query portion of the rule because this field has been removed from the current mapping so this rule is not triggering with the most updated K8s Integrations.

2022-07-28 12:49:45 -04:00

..

aws

[Security Content] Add Investigation Guides - Cloud - 3 (#2132)

2022-07-27 15:40:09 -03:00

azure

[Security Content] Add Investigation Guides - Cloud - 3 (#2132)

2022-07-27 15:40:09 -03:00

cyberarkpas

2058 add setup field to metadata (#2061)

2022-07-18 15:41:32 -04:00

endpoint

Add missing Integration field (#1537)

2021-10-26 12:05:12 -03:00

gcp

[Rule Tuning] Missing MITRE ATT&CK Mappings (#2073)

2022-07-22 14:30:34 -04:00

google_workspace

[Security Content] Add Investigation Guides - Cloud - 3 (#2132)

2022-07-27 15:40:09 -03:00

kubernetes

Update execution_user_exec_to_pod.toml (#2092)

2022-07-28 12:49:45 -04:00

o365

[Rule Tuning] Missing MITRE ATT&CK Mappings (#2073)

2022-07-22 14:30:34 -04:00

okta

[Rule Tuning] Missing MITRE ATT&CK Mappings (#2073)

2022-07-22 14:30:34 -04:00